White Papers

ManualsBrandsDell ManualsConverged InfrastructureServers Solution Resources

Direct from

Development

PowerEdge Product Group

DPDK (Data Plane Development Kit)

An open source project consisting of a set of libraries and drivers for fast packet processing, DPDK employs PMDs (Poll

Mode Drivers) to interact with user space software, avoiding latency expensive context switches between kernel and

user space. Instructions on installing the Intel

QAT PMD can be found at DPDK GUIDES LINK. Using DPDK,

performance benefit has been demonstrated for IPsec (Internet Protocol Security), which provides security at a lower

level in the protocol stack than TLS. For further reading on IPSEC, see the links

Getting Started Guidehttps://software.intel.com/en-us/articles/get-started-with-ipsec-acceleration-in-the-fdio-vpp-project

Sample Application Usage https://doc.dpdk.org/guides-16.04/sample_app_ug/ipsec_secgw.html.

Compression and Decompression

The primary vehicle for delivering sample code for data compression and decompression for Linux is QATZip, which is a

user space library that produces data in standard gzip format. See the most recent release notes for the drivers and the

API application guides for more information on data compression.

Intel

Key Protection Technology (Intel

KPT)

Inside the Intel chipset, there is a path for delivering keys directly from the key store in the chipset to the Intel® QAT

engines. Software applications can utilize Intel

KPT to manage secure asymmetric and private key transactions for

applications such as Hardware Security Modules(HSM) or Security Middle Box solutions.

Performance

Server workload performance is dependent on a wide variety of factors. The amount of CPU load on the system, the

number of cores, the amount of memory, packet sizes, and compression levels are among many of such factors. Dell

recommends specific testing to determine the exact improvements realizable by this offload. Below are some expected

performance enhancements according to testing conducted Intel(r) Xeon Processor Scalable Family & Intel(r) C627

Chipset.

Crypto

NGINX* and OpenSSL* connections/second. Conducted by Intel Applications Integration Team. Claim is actual performance measurement.

Intel® microprocessor. Processor: Intel® Xeon® processor Scalable family with C6xxB0 ES2

Performance tests use cores from a single CPU, Memory configuration:, DDR4–2400. Populated with 1 (16 GB) DIMM per channel, total of 6 DIMMs

Intel® QuickAssist Technology driver: QAT1.7.Upstream.L.0.8.0-37 Fedora* 22 (Kernel 4.2.7) BIOS:

PLYDCRB1.86B.0088.D09.1606011736

Compression

24 Core Intel(r) Xeon Scalable Platform -SP @1.8GHz, Single (UP) Processor configuration. Intel(r) C627 PCH with crypto acceleration capability (in x16 mode)

Neon City platform. DDR4 2400MHz RDIMMs 6x16GB(total 96 GB), 6 Channels, 1 x Intel® Corporation Red Rock Canyon 100GbE Ethernet Switch in the x16

PCIe slot on Socket 0. 8 cache ways allocated for DDIO.